JPH04267462A - Security system - Google Patents

Abstract

PURPOSE:To capable of protecting security even when information such as user ID and a pass-word is revealed by executing the log-in with secret procedure by the insertion of an ID card. CONSTITUTION:A main memory 6 of a terminal has a log-in procedure storing part 6a to store the log-in proceduce read from an ID card. The terminal, when a log-in request is inputted, reads the log-in procedure written beforehand and information such as a user ID and a pass-word from the ID card inserted by a card reading part 8. The pass-word (for example, group pass-word) different from the information from the ID card is inputted from a keyboard and the log-in is executed by the procedure read from the ID card. When the writing request to the ID card occurs after the changing of the user ID or the pass-word, a card writing part 9 writes the new information or the procedure into the inserted ID card.

Description

[Detailed description of the invention]

0001

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a security system in a network, and particularly to a security system when using an ID card.

0002

2. Description of the Related Art Conventionally, ID cards contain information for identifying individuals, and are used for checks at entrances and exits of buildings. On the other hand, in network systems, login to a host computer is usually performed by key input from a terminal.

0003

[Problems to be Solved by the Invention] However, the above-mentioned conventional example has a drawback in that information such as user IDs and passwords is easily known to outsiders.

The present invention eliminates the above-mentioned drawbacks of the conventional technology and provides a security system capable of protecting security even if information such as a user ID and password is known.

[0005]

[Means for Solving the Problem] In order to solve this problem, the security system of the present invention includes a reading means for reading the procedure and information for logging in from an ID card, and a method for logging in according to the procedure and information. A login means is provided, and login is executed in a secret procedure by inserting an ID card. Furthermore, it includes means for updating the procedure for logging in, and means for writing the updated procedure on the ID card.

[0006] This configuration prevents information such as user IDs and passwords from being easily known to outsiders. Furthermore, even if an outsider illegally obtains an ID card, the network is not easily infiltrated.

[0007]

DESCRIPTION OF THE PREFERRED EMBODIMENTS FIG. 1 is a block diagram showing the configuration of a network system implementing the security system of the present invention. 1 is a host computer that provides various services to users; 2 and 3 are terminals for receiving services; and 4 is a LAN that connects the host computer and the terminals 2 and 3.

FIG. 2 is a block diagram showing the hardware configuration of the host computer 1. As shown in FIG. 11 is a CPU that executes various services including the security system of the present invention as programs; 12 is a password table that stores current passwords of each user and group passwords;
3 is a main memory for loading programs, and also has a latest login procedure storage section 13a that stores the latest login procedure to be written to the user's ID card. 14 is a LAN I/O port for controlling data input/output to/from the LAN.

FIG. 3 is a block diagram showing the hardware configuration of the terminals 2 and 3. 5 is a CPU that executes software as a program as shown in FIG. 5, and 6 is a main memory for loading the program, and also has a login procedure storage section 6a that stores the login procedure read from the user's ID card. are doing. 7 is a LAN I/O port for controlling data input/output to/from the LAN; 8 is a card reader for reading login procedures and information from an ID card; 9 is an I/O port for reading new procedures and information.
A card writing section 10 is used to write to the D card, and 10 is a keyboard used to input passwords and the like.

FIG. 4 is a module configuration diagram of software running on the host computer 1. As shown in FIG. Figure 5 shows terminal 2
, 3 is a module configuration diagram of software that operates on . Here, TCP (Transmission Co.
IP (Internet Protocol), IP (Internet Protocol),
et Protocol), LLC (Logical
Link Control), DLC (DataLi
nk Control) and will be briefly explained below.

TCP/IP is a protocol created by the US Department of Defense to make computer networks highly reliable. TCP provides an end-to-end connection between two nodes in a network.
It is a procedure for providing high quality and reliable communication functions to application programs, and has functions such as order control and flow control. In OSI, this corresponds to the fourth layer, the transport layer, and the fifth layer, the session layer. IP is a procedure for absorbing network interference between multiple networks and creating a transparent route between two nodes, and provides functions such as global address assignment and routing (route selection). I have it. O.S.I.
This corresponds to the third layer, the network layer.

[0012] LLC/DLC is a protocol for a LAN data link layer established by the IEEE802 committee. LLC is a procedure for absorbing differences in communication media and providing a uniform data transfer function between adjacent nodes. In OSI, it corresponds to the upper sublayer of the second layer data link layer. DLC is a procedure for providing different data transfer functions for each communication medium, and the contents of the procedure are defined by IEEE, such as IEEE 802.3 for Ethernet, for example. MAC (Media Ac
cess control)
In SI, this corresponds to the lower sublayer of the second layer. The relationship with OSI is as follows. O.S.I.

LAN 7th layer Application layer 6 Presentation layer 5 Session
TCP layer 4 transport
TCP 3rd layer Network IP 2nd layer
Data link L
LC/DLC First Layer Physical Figures 6 and 7 are flowcharts showing the operation of the software on the terminal. Following this flowchart,
The operating procedure of this embodiment will be explained.

First, after the terminal system is started up, the terminal waits for a request from the user in step S1. Here, when a login request is input by the user, the process proceeds from step S3 to S6, where the card reading section 8 reads the pre-written login procedure and information such as the user ID and password from the inserted ID card. , step S7
Then, the user inputs a password (for example, a group password) different from the information from the ID card using the keyboard or 10, and logs in using the procedure read in step S8.

[0014] If the login procedure ends normally, that is, if the login is successful, the process returns from step S9 to S1, and the process returns to the state of waiting for a request. In addition, if the procedure cannot be completed normally due to a password input error, etc., the error processing is performed in step S10, and then the process returns to step S1.
Return to request waiting state.

[0015] Furthermore, if a request to write to the ID card occurs after changing the user ID or password, the process proceeds from step S2 to S5 and the new information is written to the inserted ID card by the card writing section 9. Alternatively, after writing the procedure, the process returns to step S1 and returns to the state of waiting for a request.

If a request other than login and card writing occurs, the process corresponding to the request is performed in step S4, and then the process returns to step S1 to wait for the request.

[0017]

According to the present invention, it is possible to provide a security system that can protect security even if information such as a user ID and password is known.

[0018] That is, by providing a terminal with a means for inputting the login procedure and necessary information into an ID card, and a means for reading and executing the procedure and information from the ID card to log in to the host, an outsider can This has the effect of making it difficult for users to know information such as user IDs and passwords, and making it easier to log in. Furthermore, by providing the terminal with a means for separately inputting a password when logging in, there is an effect that even if an outsider obtains an ID card illegally, he or she cannot easily infiltrate the network.

[Brief explanation of the drawing]

FIG. 1 is a block diagram showing the configuration of a network system implementing the security method of the present invention.

FIG. 2 is a block diagram showing the hardware configuration of a host computer.

FIG. 3 is a block diagram showing the hardware configuration of the terminal.

FIG. 4 is a module configuration diagram of software running on a host computer.

FIG. 5 is a module configuration diagram of software running on a terminal.

[Figure 6],

FIG. 7 is a flowchart showing the operating procedure of software on a terminal.

[Explanation of symbols]

Claims (2)

[Claims] [Claim 1] Procedures and information for logging in
A security system comprising a reading means for reading from a D card and a login means for logging in according to the procedure and information, and the login is executed in a secret procedure by inserting an ID card. 2. The security system according to claim 1, further comprising means for updating a procedure for logging in, and means for writing the updated procedure on an ID card.